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CLAIMS 
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server of said plurs 
CHARACTERISED 

a. at cor 
respective network 
by said respective 


1. Method for connecting a first user-terminal (UT1) to a second 
user-ternninal (UT2) over a network such as the internet and said network 
containing a plurality of user-terminals (UT1, UT2) and a plurality of 
network access servers (NASI, NAS2, NAS3) each of said plurality of 
user-terminals (UT||, UT2) being coupled to a respective network access 

I'ity of network access servers (NASI, NAS2, NAS3), 
fsi THAT said method comprises the steps of: 
hection of said second user-terminal (UT2) to its 
access server (NASI) sending connection information 
network access server (NASI) to a subscriber data 
server (SDS) included in said network and coupled to each network access 
server (NASI, NASi, NAS3); 

b. updating a database of said subscriber data server (SDS) 
with said connecti^ln information; 

c. handing by said subscriber data server (SDS) of an incoming 
call request from i>;aid first user-terminal (UT1) in order to establish a 
connection between said first user-terminal (UT1) and said second user- 
terminal (UT2) sale! first user-terminal (UT1) being connected to a first 
virtual private network, said second user-terminal (UT2) being connected 
to a second virtual private network; 

d. searching in said database of said subscriber data server 
(SDS) for connec ion information of said second user-terminal (UT2); 

e. said subscriber data server (SDS) determining said 
respective netwofk access server (NASI) connected to said second user- 
terminal (UT2), using said connection information; 

f. notilying said second user-terminal (UT2) about said 
requesting of said communication by said first user-terminal (UT1); 
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g. said second liser-terminal (UT2) initiating and controlling a 
switch-over of said connection of said second user-terminal (UT2) from 
said second virtual private network to said first virtual private network; 

h. said respective network access server (NASI) of said second 
user-terminal (UT2) switclning said connection of said second user- 
terminal (UT2) from said second virtual private network to said first virtual 
private network; and / 

i. At switch-over of said connection of said second user- 
terminal (UT2) from saia second virtual private network to said first virtual 
private network sending connection information by said respective network 
access server (NASI) to said subscriber data server (SDS). 


2. Method adcording to claim 1, CHARACTERISED IN THAT 


15 said step of notifying 


said second user-terminal (UT2) about said 


requesting of said communication by said first user-terminal (UT1) is 


performed according tc 
a. receiving 


the following steps of: 

said incoming call request of said subscriber data 
server (SDS) at said respective network access server (NASI) connected 
to said second user-terminal (UT2); and 

b. said respective network access server (NASI) connected to 
said second user-terniinal (UT2) sending said incoming call request of said 
first user-terminal (UTI) to said second user-terminal (UT2). 


25 3. Method according to claim 1, CHARACTERISED IN THAT 

said step of notifying said second user-terminal (UT2) about said 
requesting of said communication by said first user-terminal (UT1) is 
performed over a transparent connection between said subscriber data 
server (SDS) and said second user-terminal (UT2) via said respective 
30 network access seryer (NASI) connected to said second user-terminal 
(UT2). 
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4. Method acciording to claim 1, CHARACTERISED IN THAT 
said method further corr prises before step c, the steps of: 

aid incoming call request of said first user-terminal 
network access server (NAS2) connected to said 
first user-terminal (UT1 j; and 

b. said respective network access server (NAS2) connected to 
said first user-terminal (UT1) sending said incoming call request of said 
first user-terminal (UTlh to said subscriber data server (SDS). 


a. receiving s 
(UT2) at said respective 


10 5, Method abcording to claim 1, CHARACTERISED IN THAT 

said method further cqmprises before step c, the step of sending said 
incoming call request of said first user-terminal (UT1) over a transparent 
connection between sjaid first user-terminal (UT1) and said subscriber data 
server (SDS) via said/ network access server (NAS2) connected to said 

15 first user-terminal. 


6. Network Access Server (NASI) for enabling a connection 
between a first useriterminal (UT1) and a second user-terminal (UT2) over 
a network such as the internet, said network containing a plurality of user- 
20 terminals (UT1, UT2h and a plurality of network access servers (NASI, 
NAS2, NAS3) each <bf said plurality of user-terminals (UT1, UT2) being 
coupled to a respeitive network access server of said plurality of network 
access servers (NASI, NAS2, NAS3), 

CHARACTERISED jlN THAT said network access server (NASI) comprises 
25 the following means to enable said connection using the method according 

to claim 1 : I 

a, switch notification reception means (SNRM), adapted to receive a 

request from said second user-terminal (UT2) to initiate a switch-over of a 

connection of saidlsecond user-terminal (UT2) from a second virtual private 
30 network to a first virtual private network; 


- 15- 


\ 


b. switching meaihs (SM), coupled with an input to an output of said 
switch notification reception means (SNRM) and adapted to perform said 
switch-over of said connection of said second user-terminal (UT2) from said 


second virtual private netwo 
c. user-terminal 
coupled with an input to an 
send connection information 


k to said first virtual private network; and 
bonnect notification sending means (HCNSM), 
Dutput of said switching means (SM) and adapted to 
to said subscriber data server (SDS) at connecting 


of said second user-terming 
(NASI) and at switch-over 


I (UT2) to said respective network access server 


' of said connection of said second user-terminal 
10 (UT2) from said second virjtual private network to said first virtual private 
network. 

7- Network access server (NASI) according to claim 6, 
CHARACTERISED IN THAT said network access server (NASI) further 
15 comprises: | 

a. connectionlestablishment request reception means (CERRM1), 
adapted to receive a connection request from said subscriber data server 
(SDS) to establish said connection between said first user-terminal (UT1) 

connected to said first virtual private network and said second user-terminal 

J 

20 (UT2) connected to said second virtual private network via said respective 

network access server (NASI); and 

/ 

b. connection establishment request sending means (CERSM2), 
coupled with an input to an output of said connection establishment requesting 
reception means (CE^RMI) and adapted to notify said second user-terminal 

25 (UT2) about an incoming call from said first user-terminal (UT1). 


30 


8. Netwonk Access Server (NAS2), for enabling a connection 
between a first user -terminal (UT1) and a second user-terminal (UT2) over 
a network such as tie internet, said network containing a plurality of user- 
terminals (UT1, UT2) and a plurality of network access servers 
(NAS1,NAS2, NAsi) each of said plurality of user-terminals (UT1, UT2) 
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being coupled to a respective network access server of said plurality of 
network access servers (iAS1,NAS2, NAS3), CHARACTERISED IN THAT 
said network access server (NAS2) comprises the following nneans to 
enable said connection using the method according to claim 2: 

a. connection establishment request reception means (CERRM4), 
adapted to receive a connection request from said first user-terminal (UT1) to 
establish said connection! between said first user-terminal (UT1) connected to 
said first virtual private network and said second user-terminal (UT2) connected 
to said second virtual private network; and 

b. connectiom establishment request sending means (CERSM4), 
coupled with an input tolan output of said connection establishment requesting 
reception means (CERRM4) and adapted to notify said subscriber data server 
(SDS) about an incoming call from said first user-terminal (UT1). 
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9. Network access server according to claim 6, CHARACTERISED 
IN THAT said Network jaccess server further comprises: 

a. connection establishment request reception means (CERRM2), 
pnnection request from said first user-terminal (UT1) to 
on between said first user-terminal (UT1) connected to 
network and said second user-terminal (UT2) connected 
)rivate network; and 

on establishment request sending means (CERSM3), 
coupled with an input jto an output of said connection establishment requesting 
reception means (CERRM2) and adapted to notify said subscriber data server 
(SDS) about an incoming call from said first user-terminal (UT1), 

lO.Subscr ber Data Server (SDS), for enabling a connection of a first 
user-terminal (UT1) to a second user-terminal (UT2) over a network such as 


adapted to receive a o 
establish said connect 
said first virtual private 
to said second virtual 
b. connect 


the internet, said ne 
UT2) and a plurality 


of said plurality of user-terminals (UT1, UT2) being coupled to a respective 


work containing a plurality of user-terminals (UT1, 
of network access servers (NASI, NAS2, NAS3) each 


# 
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network access server of said plurality of network access servers (NASI, 
NAS2, NAS3) and said subkcriber data server (SDS) being coupled to 
each network access server of said plurality of network access servers 
(NASI, NAS2, NAS3), said subscriber data server connprises the following 
5 means to enable said connection using the method according to claim 1: 

a. user-terminal connect notification reception means (UTCNRM), 
adapted to receive said connection information at connection of said second 
user-terminal (UT2) to said nespective network access server (NASI) and at 
switch-over of said connectipn of said second user-terminal (UT2) from said 

10 second virtual private network to said first virtual private network; 

b. user-terminal connect notification updating means (UTCNUM) 
coupled with an input to an output of said user-terminal connect notification 
reception means (UTCNRM) and adapted to update a database of said 
subscriber data server (SDS) with said connection information; 

15 c. connection establishment request reception means (CERRM), 

adapted to receive a connection request from said first user-terminal (UT1) to 
establish a connection between said first user-terminal (UT1) connected to a 
first virtual private network and said second user-terminal (UT2) connected to 
said second virtual privafte network; 

20 d. connectidn information searching means (RISM), coupled with an 

input to an output of said connection establishment request reception means 
(CERRM) and adapteq to search in said database of said subscriber data 
server (SDS) for conniction information of said second user-terminal (UT2); 
and I 

25 e. connection establishment request sending means (CERSM1), 

coupled with an inpuflto an output of said Connection information searching 
means (RISM) and adapted to notify said second user-terminal (UT2) about an 
incoming call from said first user-terminal (UT1). 


30 11-Secorid user-terminal (UT2), for inclusion in a network such as 

the internet contain ng a plurality of such user-terminals and a plurality of 
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network access servers/ (N AS 1 , NAS2, NAS3) each of said plurality of 
user-terminals (UT1, UT2) being coupled to a respective network access 
server of said plurality of network access servers (NASI, NAS2, NAS3), 
CHARACTERISED IN THAT said second user-terminal (UT2) comprises the 
following means for en abling a connection between a first user-terminal 
(UT1) and itself over said network using a method according to claimi: 

a. connection establishment request reception means (CERRMS), 
adapted to receive a connection request from said first user-terminal (UT1) via 
its respective network access server (NAS2) to establish a connection to said 
second user-terminal (L T2); 

b. incoming call handling means (ICHM), coupled with an input to an 
output of said connecticn establishment request reception means (CERRM3) 
and adapted to handle r>a\d connection request from said first user-terminal 
(UT1);and 

c. switch ret^uesting means (SRM), coupled with an input to an 
output of said incoming call handling means (ICHM) and adapted to request 
said respective network access server (NASI) to switch said connection of said 
second user-terminal (fjT2) from a second virtual private network to a first 
virtual private network 

12, Softwa e module for running on a processing system for 
inclusion in a Subscrioer Data Sen/er (SDS) and for enabling a connection of a 
first user-terminal (UTI) to a second user-terminal (UT2) over a network 
such as the internet, said network containing a plurality of user-terminals 
(UTI, UT2) and a plurality of network access servers (NASI, NAS2, 
NAS3) each of said plurality of user-terminals (UT1, UT2) being coupled to 
a respective network access server of said plurality of network access 
servers (NASI, N/^S2, NAS3) and said subscriber data server (SDS) being 
coupled to each network access server of said plurality of network access 
servers (NASI, NAS2, NAS3), said software module comprises the 
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following software sub-mo 
method according to clairtji 1: 

a. user-terminal 
to receive said connection i 


1 ules to 
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enable said connection using the 


connect notification reception sub-module, adapted 
hformation at connection of said second user- 
terminal (UT2) to said respective network access server (NASI) and at switch- 
over of said connection of said second user-terminal (UT2) from said second 
virtual private network to said first virtual private network; 

b. user-terminal connect notification updating sub-module, co- 
operating with said user-terminal connect notification reception sub-module 


10 ^ and adapted to update a 


atabase of said subscriber data server (SDS) with 


said connection information; 

c. connection establishment request reception sub-module, 
adapted to receive a connection request from said first user-terminal (UT1) to 
establish a connection between said first user-terminal (UT1) connected to a 
first virtual private network and said second user-terminal (UT2) connected to 
said second virtual priv^e network; 

d. connectioln information searching sub-module, co-operating said 
connection establishment request reception sub-module and adapted to 
search in said database of said subscriber data server (SDS) for connection 
information of said second user-terminal (UT2); and 

e. connection establishment request sending sub-module, co- 
operating with said ccmnection information searching sub-module and adapted 
to notify said second juser-terminal (UT2) about an incoming call from said first 
user-terminal (UT1). 


30 


13. Software module for running on a processing system for 
inclusion in a second user terminal (UT2) and for inclusion in a network such as 
the internet containing a plurality of such user-terminals and a plurality of 
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network access servfers (NASI, NAS2, NAS3) each of said plurality of 
user-terminals (UTif UT2) being coupled to a respective network access 
server of said plurality of network access servers (NASI, NAS2, NAS3), 
CHARACTERISED IN THAT said software module comprises the following 
software sub-moduies for enabling a connection between a first user- 
terminal (UT1) and itself over said network using a method according to 
claimi : 

a. connection establishment request reception sub-module, adapted 
tion request from said first user-terminal (UT1) via its 

J access server (NAS2) to establish a connection to said 
al (UT2); 

b. incoming call handling sub-module, co-operating with said 
connection establishment request reception sub-module and adapted to handle 
said connection re:|uest from said first user-terminal (UT1); and 

c. switj^h requesting sub-module, co-operating with said incoming 
call handling sub-module and adapted to request said respective network 
access server (N/=.S1) to switch said connection of said second user-terminal 
(UT2) from a secDnd virtual private network to a first virtual private network. 


to receive a connei 
respective networl^ 
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